Typedef
| Static Public Summary | ||
| public |
The configuration for salte auth |
|
| public |
The configuration for salte auth |
|
| public |
Disable certain security validations if your provider doesn't support them. |
|
| public |
Disable certain security validations if your provider doesn't support them. |
|
Static Public
public Config: Object source
The configuration for salte auth
Properties:
| Name | Type | Attribute | Description |
| providerUrl | String | The base url of your identity provider. |
|
| responseType | 'id_token' | 'id_token token' | 'code' | The response type to authenticate with. |
|
| redirectUrl | String | RedirectURLs | The redirect url specified in your identity provider. |
|
| clientId | String | The client id of your identity provider |
|
| scope | String | A list of space-delimited claims used to determine what user information is provided and what access is given. Most providers require 'openid'. |
|
| routes | Boolean | Array<String> | A list of secured routes. If true is provided then all routes are secured. |
|
| endpoints | Array<String|RegExp> | A list of secured endpoints. |
|
| provider | 'auth0' | 'azure' | 'cognito' | 'wso2' | 'okta' | The identity provider you're using. |
|
| loginType | 'iframe' | 'redirect' | false |
|
The automated login type to use. |
| redirectLoginCallback | Function |
|
A callback that is invoked when a redirect login fails or succeeds. |
| storageType | 'session' | 'local' |
|
The Storage api to keep authenticate information stored in. |
| validation | Boolean | Validation |
|
Used to disable certain security validations if your provider doesn't support them. |
| autoRefresh | Boolean |
|
Automatically refreshes the users token upon switching tabs or one minute prior to expiration. |
| autoRefreshBuffer | Number |
|
A number of miliseconds before token expiration to refresh. |
| queryParams | Object |
|
A key-value set of additional query params to attached to the login request. |
public LoginConfig: Object source
The configuration for salte auth
Properties:
| Name | Type | Attribute | Description |
| noPrompt | Boolean |
|
Disables login prompts, this should only be used for token renewal! |
| clear | false | 'errors' | 'all' |
|
Whether to clear "all" profile information, only "errors", or nothing. |
| events | Boolean |
|
Whether events should be fired off if the login is successful or not. |
public RedirectURLs: Object source
Disable certain security validations if your provider doesn't support them.
public Validation: Object source
Disable certain security validations if your provider doesn't support them.
Properties:
| Name | Type | Attribute | Description |
| nonce | Boolean |
|
Passing false will disable nonce validation, leaving you vulnerable to replay attacks. |
| state | Boolean |
|
Passing false will disable state validation, leaving you vulnerable to XSRF attacks. |
| azp | Boolean |
|
Passing false will disable azp validation. |
| aud | Boolean |
|
Passing false will disable aud validation. |
